← Back to search Server uses network capabilities via: axios, fetch(), http, https, net, node-fetch Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, path Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync() Server uses env_vars capabilities via: process.env
io.github.firebase/firebase-mcp
Gives AI development tools Firebase-specific capabilities and expertise.
? Not scanned yet
Versions
15.18.0latestMay 13, 2026
15.17.0May 7, 2026
15.16.0Apr 29, 2026
15.15.0Apr 16, 2026
15.14.0Apr 9, 2026
+ show 95 moreshow less
15.13.0Apr 2, 2026
15.12.0Mar 27, 2026
15.11.0Mar 18, 2026
15.10.1Mar 16, 2026
15.10.0Mar 12, 2026
15.9.1Mar 9, 2026
15.9.0Mar 9, 2026
15.8.0Feb 25, 2026
15.7.0Feb 20, 2026
15.6.0Feb 12, 2026
15.5.1Jan 30, 2026
15.5.0Jan 29, 2026
15.4.0Jan 22, 2026
15.3.1Jan 15, 2026
15.3.0Jan 15, 2026
15.2.1Jan 8, 2026
15.2.0Jan 8, 2026
15.1.0Dec 18, 2025
15.0.0Dec 10, 2025
14.27.0Dec 4, 2025
14.26.0Nov 21, 2025
14.25.1Nov 19, 2025
14.25.0Nov 13, 2025
14.24.2Nov 10, 2025
14.24.1Nov 7, 2025
14.24.0Nov 5, 2025
14.23.0Oct 30, 2025
14.22.0Oct 23, 2025
14.21.0Oct 22, 2025
14.20.0Oct 15, 2025
14.19.1Oct 8, 2025
14.19.0Oct 7, 2025
14.18.0Oct 2, 2025
14.17.0Sep 17, 2025
14.16.0Sep 10, 2025
14.15.2Sep 3, 2025
14.15.1Aug 28, 2025
14.15.0Aug 27, 2025
14.14.0Aug 21, 2025
14.13.0Aug 21, 2025
14.12.1Aug 15, 2025
14.12.0Aug 6, 2025
14.11.2Jul 30, 2025
14.11.1Jul 22, 2025
14.11.0Jul 17, 2025
14.10.1Jul 10, 2025
14.10.0Jul 10, 2025
14.9.0Jun 26, 2025
14.8.0Jun 20, 2025
14.7.0Jun 12, 2025
14.6.0Jun 4, 2025
14.5.1May 30, 2025
14.5.0May 29, 2025
14.4.0May 16, 2025
14.3.1May 9, 2025
14.3.0May 7, 2025
14.2.2Apr 30, 2025
14.2.1Apr 23, 2025
14.2.0Apr 16, 2025
14.1.0Apr 2, 2025
14.0.1Mar 28, 2025
14.0.0Mar 27, 2025
13.35.1Mar 21, 2025
13.35.0Mar 20, 2025
13.34.0Mar 11, 2025
13.33.0Mar 6, 2025
13.32.0Feb 27, 2025
13.31.2Feb 19, 2025
13.31.1Feb 13, 2025
13.31.0Feb 12, 2025
13.30.0Feb 4, 2025
13.29.3Jan 30, 2025
13.29.2Jan 22, 2025
13.29.1Dec 13, 2024
13.29.0Dec 12, 2024
13.28.0Dec 4, 2024
13.27.0Nov 21, 2024
13.26.0Nov 19, 2024
13.25.0Nov 12, 2024
13.24.2Nov 7, 2024
13.24.1Nov 5, 2024
13.24.0Nov 4, 2024
13.23.1Oct 30, 2024
13.23.0Oct 22, 2024
13.22.1Oct 16, 2024
13.22.0Oct 8, 2024
13.21.0Oct 8, 2024
13.20.2Sep 30, 2024
13.20.1Sep 27, 2024
13.20.0Sep 26, 2024
13.19.0Sep 23, 2024
13.18.0Sep 19, 2024
13.17.0Sep 11, 2024
13.16.0Aug 27, 2024
13.15.4Aug 21, 2024
0.3.0latestfirst seen May 19, 2026
Tools 0
No tools indexed yet.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 194
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 152 direct dependencies
medium
Suspicious package name: react-dom
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.24.0 (GHSA-345p-7cg4-v4c7)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.24.0 (GHSA-8r9q-7v3j-jr4g)
medium
Vulnerable dependency: ajv@8.17.1 (GHSA-2g4f-4pwh-qvx6)
medium
Vulnerable dependency: body-parser@1.19.0 (GHSA-qwcr-r2fm-qrc7)
medium
Vulnerable dependency: body-parser@1.19.0 (GHSA-v422-hmwv-36x6)
medium
Vulnerable dependency: express@4.16.4 (GHSA-qw6h-vgh9-j6wx)
medium
Vulnerable dependency: express@4.16.4 (GHSA-rv95-896h-c2vc)
medium
Vulnerable dependency: form-data@4.0.1 (GHSA-fjxv-7rqg-78g4)
medium
Vulnerable dependency: form-data@4.0.1 (GHSA-hmw2-7cc7-3qxx)
medium
Vulnerable dependency: js-yaml@4.2.0 (GHSA-52cp-r559-cp3m)
medium
Vulnerable dependency: js-yaml@4.2.0 (GHSA-5p4m-2wfm-xmqj)
medium
Vulnerable dependency: minimatch@3.0.4 (GHSA-23c5-xmqv-rm74)
medium
Vulnerable dependency: minimatch@3.0.4 (GHSA-3ppc-4f35-3m26)
medium
Vulnerable dependency: minimatch@3.0.4 (GHSA-7r86-cg39-jmmj)
medium
Vulnerable dependency: minimatch@3.0.4 (GHSA-f8q6-p94x-37v3)
medium
Vulnerable dependency: morgan@1.10.0 (GHSA-4vj7-5mj6-jm8m)
medium
Vulnerable dependency: tar@7.5.11 (GHSA-23hp-3jrh-7fpw)
medium
Vulnerable dependency: tar@7.5.11 (GHSA-8x88-c5mf-7j5w)
medium
Vulnerable dependency: tar@7.5.11 (GHSA-gvwx-54wh-qm9j)
medium
Vulnerable dependency: tar@7.5.11 (GHSA-r292-9mhp-454m)
medium
Vulnerable dependency: tar@7.5.11 (GHSA-vmf3-w455-68vh)
medium
Vulnerable dependency: tar@7.5.11 (GHSA-w8wr-v893-vjvp)
medium
Vulnerable dependency: tmp@0.2.3 (GHSA-52f5-9888-hmc6)
medium
Vulnerable dependency: tmp@0.2.3 (GHSA-ph9p-34f9-6g65)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-2mjp-6q6p-2qxm)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-35p6-xmwp-9g52)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-3g92-w8c5-73pq)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-4992-7rv2-5pvq)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-8xcm-r25x-g524)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-c76h-2ccp-4975)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-cxrh-j4jr-qwg3)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-f269-vfmq-vjvj)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-g8m3-5g58-fq7m)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-g9mf-h72j-4rw9)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-m8rv-5g2x-5cg5)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-p88m-4jfj-68fv)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-v3r7-h72x-cjcm)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-v9p9-hfj2-hcw8)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-vrm6-8vpv-qv8q)
medium
Vulnerable dependency: undici@6.19.0 (GHSA-vxpw-j846-p89q)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-2pvr-wf23-7pc7)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-49w6-73cw-chjr)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-5ff5-9fcw-vg88)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-8hv8-536x-4wqp)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-c4pw-33h3-35xw)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-f48w-9m4c-m7f5)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-fvmw-cj7j-j39q)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-ggxq-hp9w-j794)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-j687-52p2-xcff)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-jrpj-wcv7-9fh9)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-whqg-ppgf-wp8c)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-wrwg-2hg8-v723)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-x3h8-62x9-952g)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-xf8x-j4p2-f749)
medium
Vulnerable dependency: astro@2.2.3 (GHSA-xr5h-phrj-8vxv)
medium
Vulnerable dependency: firebase@9.16.0 (GHSA-3wf4-68gx-mph8)
medium
Vulnerable dependency: next@14.1.0 (GHSA-36qx-fr4f-26g5)
medium
Vulnerable dependency: next@14.1.0 (GHSA-3g8h-86w9-wvmq)
medium
Vulnerable dependency: next@14.1.0 (GHSA-3h52-269p-cp9r)
medium
Vulnerable dependency: next@14.1.0 (GHSA-3x4c-7xq6-9pq8)
medium
Vulnerable dependency: next@14.1.0 (GHSA-4342-x723-ch2f)
medium
Vulnerable dependency: next@14.1.0 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@14.1.0 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@14.1.0 (GHSA-5j59-xgg2-r9c4)
medium
Vulnerable dependency: next@14.1.0 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@14.1.0 (GHSA-7gfc-8cq8-jh5f)
medium
Vulnerable dependency: next@14.1.0 (GHSA-7m27-7ghc-44w9)
medium
Vulnerable dependency: next@14.1.0 (GHSA-8h8q-6873-q5fj)
medium
Vulnerable dependency: next@14.1.0 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@14.1.0 (GHSA-9g9p-9gw9-jx7f)
medium
Vulnerable dependency: next@14.1.0 (GHSA-c4j6-fc7j-m34r)
medium
Vulnerable dependency: next@14.1.0 (GHSA-f82v-jwr5-mffw)
medium
Vulnerable dependency: next@14.1.0 (GHSA-ffhc-5mcf-pf4q)
medium
Vulnerable dependency: next@14.1.0 (GHSA-fr5h-rqp8-mj6g)
medium
Vulnerable dependency: next@14.1.0 (GHSA-g5qg-72qw-gw5v)
medium
Vulnerable dependency: next@14.1.0 (GHSA-g77x-44xx-532m)
medium
Vulnerable dependency: next@14.1.0 (GHSA-ggv3-7p47-pfv8)
medium
Vulnerable dependency: next@14.1.0 (GHSA-gp8f-8m3g-qvj9)
medium
Vulnerable dependency: next@14.1.0 (GHSA-gx5p-jg67-6x7h)
medium
Vulnerable dependency: next@14.1.0 (GHSA-h25m-26qc-wcjf)
medium
Vulnerable dependency: next@14.1.0 (GHSA-h64f-5h5j-jqjh)
medium
Vulnerable dependency: next@14.1.0 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@14.1.0 (GHSA-mwv6-3258-q52c)
medium
Vulnerable dependency: next@14.1.0 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@14.1.0 (GHSA-q4gf-8mx6-v5v3)
medium
Vulnerable dependency: next@14.1.0 (GHSA-qpjv-v59x-3qc4)
medium
Vulnerable dependency: next@14.1.0 (GHSA-vfv6-92ff-j949)
medium
Vulnerable dependency: next@14.1.0 (GHSA-xv57-4mr9-wg8v)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-353f-5xf4-qw67)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-356w-63v5-8wf4)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-4r4m-qw57-chr8)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-4w7w-66w2-5vf9)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-64vr-g452-qvp3)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-859w-5945-r5v3)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-8jhw-289h-jh2g)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-93m4-6634-74q7)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-9cwx-2883-4wfx)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-c24v-8rfc-w8vw)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-c27g-q93r-2cwf)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-g4jq-h2w9-997c)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-jqfw-vq24-v9c3)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-vg6x-rcgg-rjx6)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-x574-m823-4x7w)
medium
Vulnerable dependency: vite@4.2.1 (GHSA-xcj6-pq6g-qj4x)
medium
Vulnerable dependency: shelljs@0.8.3 (GHSA-4rq4-32rv-6wp6)
medium
Vulnerable dependency: shelljs@0.8.3 (GHSA-64g7-mvw6-v9qj)
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-52cp-r559-cp3m)
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-5p4m-2wfm-xmqj)
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-h67p-54hq-rp68)
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-mh29-5h37-fv8m)
medium
Vulnerable dependency: webpack@5.75.0 (GHSA-38r7-794h-5758)
medium
Vulnerable dependency: webpack@5.75.0 (GHSA-4vvj-4cpr-p986)
medium
Vulnerable dependency: webpack@5.75.0 (GHSA-8fgc-7cc6-rx7x)
medium
Vulnerable dependency: webpack@5.75.0 (GHSA-hc6q-2mpp-qw7j)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.11.5 (GHSA-345p-7cg4-v4c7)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.11.5 (GHSA-8r9q-7v3j-jr4g)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.11.5 (GHSA-w48q-cv73-mx4w)
medium
Vulnerable dependency: firebase-tools@latest (GHSA-rcm2-22f3-pqv3)
medium
Vulnerable dependency: @angular/common@19.2.0 (GHSA-39pv-4j6c-2g6v)
medium
Vulnerable dependency: @angular/common@19.2.0 (GHSA-48r7-hpm6-gfxm)
medium
Vulnerable dependency: @angular/common@19.2.0 (GHSA-58c5-g7wp-6w37)
medium
Vulnerable dependency: @angular/common@19.2.0 (GHSA-jhpw-976m-542j)
medium
Vulnerable dependency: @angular/common@19.2.0 (GHSA-p3vc-36g9-x9gr)
medium
Vulnerable dependency: @angular/common@19.2.0 (GHSA-q6f4-qqrg-jv6x)
medium
Vulnerable dependency: @angular/compiler@19.2.0 (GHSA-58w9-8g37-x9v5)
medium
Vulnerable dependency: @angular/compiler@19.2.0 (GHSA-f3m7-gqxr-g87x)
medium
Vulnerable dependency: @angular/compiler@19.2.0 (GHSA-g93w-mfhg-p222)
medium
Vulnerable dependency: @angular/compiler@19.2.0 (GHSA-jj27-h5hq-8x99)
medium
Vulnerable dependency: @angular/compiler@19.2.0 (GHSA-jrmj-c5cx-3cw6)
medium
Vulnerable dependency: @angular/compiler@19.2.0 (GHSA-v4hv-rgfq-gp49)
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-692r-grfm-v8x7)
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-f3m7-gqxr-g87x)
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-g93w-mfhg-p222)
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-jj27-h5hq-8x99)
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-jrmj-c5cx-3cw6)
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-prjf-86w9-mfqv)
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-rgjc-h3x7-9mwg)
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-45q2-gjvg-7973)
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-68x2-mx4q-78m7)
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-gxx4-3xcv-f8qx)
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-hqr9-c56f-3x7f)
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-rfh7-fxqc-q52v)
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-vpx6-8pjr-4g3v)
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-xrxm-cp7j-8xf6)
medium
Vulnerable dependency: @angular/ssr@19.2.0 (GHSA-68x2-mx4q-78m7)
medium
Vulnerable dependency: @angular/ssr@19.2.0 (GHSA-69xr-m8h6-h664)
medium
Vulnerable dependency: @angular/ssr@19.2.0 (GHSA-q63q-pgmf-mxhr)
medium
Vulnerable dependency: @angular/ssr@19.2.0 (GHSA-x288-3778-4hhx)
medium
Vulnerable dependency: @angular/ssr@19.2.0 (GHSA-xh43-g2fq-wjrj)
medium
Vulnerable dependency: express@4.15.2 (GHSA-qw6h-vgh9-j6wx)
medium
Vulnerable dependency: express@4.15.2 (GHSA-rv95-896h-c2vc)
medium
Vulnerable dependency: next@16.2.6 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@16.2.6 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@16.2.6 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@16.2.6 (GHSA-6gpp-xcg3-4w24)
medium
Vulnerable dependency: next@16.2.6 (GHSA-89xv-2m56-2m9x)
medium
Vulnerable dependency: next@16.2.6 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@16.2.6 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@16.2.6 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@16.2.6 (GHSA-q8wf-6r8g-63ch)
medium
Buffer.from base64 in firebase-firebase-tools-2d3aa69/src/accountImporter.ts:47
medium
High-entropy string (5.87 bits/char) in firebase-firebase-tools-2d3aa69/scripts/emulator-tests/functionsEmulator.spec.ts:485
medium
High-entropy string (5.86 bits/char) in firebase-firebase-tools-2d3aa69/scripts/emulator-tests/functionsEmulator.spec.ts:533
medium
Buffer.from base64 in firebase-firebase-tools-2d3aa69/src/management/apps.ts:592
medium
Buffer.from base64 in firebase-firebase-tools-2d3aa69/src/emulator/tasksEmulator.ts:272
medium
Buffer.from base64 in firebase-firebase-tools-2d3aa69/src/gcp/secretManager.ts:224
medium
Buffer.from base64 in firebase-firebase-tools-2d3aa69/src/init/features/ailogic/index.ts:100
medium
Buffer.from base64 in firebase-firebase-tools-2d3aa69/src/init/features/hosting/github.ts:657
medium
Buffer.from base64 in firebase-firebase-tools-2d3aa69/src/init/features/hosting/github.ts:681
medium
Buffer.from base64 in firebase-firebase-tools-2d3aa69/src/mcp/tools/core/get_sdk_config.ts:53
medium
Hex string literal (>50 chars) in firebase-firebase-tools-2d3aa69/src/deploy/hosting/uploader.spec.ts:112
medium
Hex string literal (>50 chars) in firebase-firebase-tools-2d3aa69/src/deploy/hosting/uploader.spec.ts:113
medium
Buffer.from base64 in firebase-firebase-tools-2d3aa69/src/emulator/auth/operations.ts:3108
medium
Buffer.from base64 in firebase-firebase-tools-2d3aa69/src/emulator/auth/state.ts:973
medium
High-entropy string (5.95 bits/char) in firebase-firebase-tools-2d3aa69/firebase-vscode/src/webview.ts:64
info
package.json metadata
info
Transport: stdio
info
Required env vars (131)
high
High-risk OAuth scope: https://www.googleapis.com/auth/cloud-platform
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 3150 components
high
Generic API Key Assignment found in firebase-firebase-tools-2d3aa69/scripts/agent-evals/templates/crashlytics-flutter/lib/firebase_options.dart
high
Generic API Key Assignment found in firebase-firebase-tools-2d3aa69/scripts/agent-evals/src/data/index.ts
high
Hardcoded Password found in firebase-firebase-tools-2d3aa69/src/emulator/auth/state.ts
medium
No build provenance detected (SLSA L0)